orizu 0.5.5 → 0.5.6

package/dist/hosted-bootstrap.js

@@ -24,7 +24,7 @@
  */
 import { sweepForTokenResidue } from './daytona-slice.js';
 import { redactSecrets } from './secret-redaction.js';
-import { BEARER_BASENAME, BOOT_CONTEXT_BASENAME, DEFAULT_CACHE_REFRESH_BUFFER_MS, HELPER_SCRIPT_BASENAME, PREBAKED_MARKER_PATH, REPO_CRED_CACHE_BASENAME, SETUP_HOOK_RELATIVE_PATH, parsePrebakedMarker, renderCredentialHelperScript, serializeBootContext, } from './hosted-runtime-assets.js';
+import { AGENT_GIT_IDENTITY, BEARER_BASENAME, BOOT_CONTEXT_BASENAME, DEFAULT_CACHE_REFRESH_BUFFER_MS, HELPER_SCRIPT_BASENAME, PREBAKED_MARKER_PATH, REPO_CRED_CACHE_BASENAME, SETUP_HOOK_RELATIVE_PATH, parsePrebakedMarker, renderCredentialHelperScript, serializeBootContext, } from './hosted-runtime-assets.js';
 function newEventId() {
     const cryptoObj = globalThis.crypto;
     if (cryptoObj?.randomUUID)
@@ -236,6 +236,11 @@ export async function bootstrapHostedSandbox(opts) {
         // Persist the helper repo-LOCAL (never --global) for subsequent fetch/push.
         await session.exec(`git -C ${workspaceDir} config credential.helper ${shellSingleQuote(helperValue)}`);
         await session.exec(`git -C ${workspaceDir} config credential.useHttpPath true`);
+        // Repo-LOCAL agent identity: the sandbox has no ambient git identity, so
+        // without this every agent `git commit` dies with "Author identity unknown"
+        // (ALI-1036, found live in QA-3). Same identity the loop stamps on events.
+        await session.exec(`git -C ${workspaceDir} config user.name ${shellSingleQuote(AGENT_GIT_IDENTITY.name)}`);
+        await session.exec(`git -C ${workspaceDir} config user.email ${shellSingleQuote(AGENT_GIT_IDENTITY.email)}`);
         record('repo_cloned', true, `cloned ${opts.sessionBranch}`);
         await sink.append('repo_cloned', { branch: opts.sessionBranch, workspaceDir });
         // 4 — Provision the Orizu CLI (non-fatal, recorded — OpenInspect setup.sh

package/dist/hosted-runtime-assets.js

@@ -31,6 +31,14 @@ export const DEFAULT_CACHE_REFRESH_BUFFER_MS = 5 * 60 * 1000;
 /** Customer setup hook path, relative to the repo root (mirrors OpenInspect's
  *  `.openinspect/setup.sh` — fresh-boot only, non-fatal, output captured). */
 export const SETUP_HOOK_RELATIVE_PATH = '.orizu/setup.sh';
+/**
+ * The git author identity for hosted-agent commits. Bootstrap configures it
+ * repo-LOCAL in the sandbox clone (never --global) so agent `git commit` works
+ * out of the box — the sandbox has no ambient identity and commits died with
+ * "Author identity unknown" (ALI-1036, found live in QA-3). The loop uses the
+ * same identity for run-event attribution; keep them identical.
+ */
+export const AGENT_GIT_IDENTITY = { name: 'Orizu Agent', email: 'agent@orizu.ai' };
 // -- Pre-baked runtime marker (ALI-1017) -------------------------------------
 /**
  * Absolute path of the marker the pre-baked hosted-runtime image writes at build

package/dist/hosted-session-cli.js

@@ -37,7 +37,7 @@
 import { createLocalSimProvider, } from './sandbox-provider.js';
 import { bootstrapHostedSandbox, createBootstrapRunEventSink, } from './hosted-bootstrap.js';
 import { resumeRunEventSink } from './hosted-run-event-sink.js';
-import { BEARER_BASENAME } from './hosted-runtime-assets.js';
+import { AGENT_GIT_IDENTITY, BEARER_BASENAME } from './hosted-runtime-assets.js';
 import { createVercelProvider } from './vercel-sandbox-provider.js';
 import { buildEgressPolicy, DEFAULT_EGRESS_CANARY_HOST } from './egress-policy.js';
 import { hostedLoopCommand } from './hosted-loop.js';
@@ -355,7 +355,7 @@ export async function startHostedSession(opts) {
         model,
         reasoningEffort: opts.reasoningEffort,
         messageId: `${runId}:task`,
-        author: { name: 'Orizu Agent', email: 'agent@orizu.ai' },
+        author: AGENT_GIT_IDENTITY,
         anthropicDummyKey: opts.modelApiKey ? ANTHROPIC_DUMMY_KEY : undefined,
         // ALI-1017: skip the in-sandbox opencode install when the image ships it.
         prebaked: prebakedImage,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orizu",
-  "version": "0.5.5",
+  "version": "0.5.6",
   "private": false,
   "type": "module",
   "bin": {

package/src/hosted-bootstrap.ts

@@ -27,6 +27,7 @@ import type { SandboxSession } from './sandbox-provider.js'
 import { sweepForTokenResidue, type HygieneFinding } from './daytona-slice.js'
 import { redactSecrets } from './secret-redaction.js'
 import {
+  AGENT_GIT_IDENTITY,
   BEARER_BASENAME,
   BOOT_CONTEXT_BASENAME,
   DEFAULT_CACHE_REFRESH_BUFFER_MS,
@@ -410,6 +411,11 @@ export async function bootstrapHostedSandbox(opts: HostedBootstrapOptions): Prom
     // Persist the helper repo-LOCAL (never --global) for subsequent fetch/push.
     await session.exec(`git -C ${workspaceDir} config credential.helper ${shellSingleQuote(helperValue)}`)
     await session.exec(`git -C ${workspaceDir} config credential.useHttpPath true`)
+    // Repo-LOCAL agent identity: the sandbox has no ambient git identity, so
+    // without this every agent `git commit` dies with "Author identity unknown"
+    // (ALI-1036, found live in QA-3). Same identity the loop stamps on events.
+    await session.exec(`git -C ${workspaceDir} config user.name ${shellSingleQuote(AGENT_GIT_IDENTITY.name)}`)
+    await session.exec(`git -C ${workspaceDir} config user.email ${shellSingleQuote(AGENT_GIT_IDENTITY.email)}`)
     record('repo_cloned', true, `cloned ${opts.sessionBranch}`)
     await sink.append('repo_cloned', { branch: opts.sessionBranch, workspaceDir })
 

package/src/hosted-runtime-assets.ts

@@ -35,6 +35,15 @@ export const DEFAULT_CACHE_REFRESH_BUFFER_MS = 5 * 60 * 1000
  *  `.openinspect/setup.sh` — fresh-boot only, non-fatal, output captured). */
 export const SETUP_HOOK_RELATIVE_PATH = '.orizu/setup.sh'
 
+/**
+ * The git author identity for hosted-agent commits. Bootstrap configures it
+ * repo-LOCAL in the sandbox clone (never --global) so agent `git commit` works
+ * out of the box — the sandbox has no ambient identity and commits died with
+ * "Author identity unknown" (ALI-1036, found live in QA-3). The loop uses the
+ * same identity for run-event attribution; keep them identical.
+ */
+export const AGENT_GIT_IDENTITY = { name: 'Orizu Agent', email: 'agent@orizu.ai' } as const
+
 // -- Pre-baked runtime marker (ALI-1017) -------------------------------------
 
 /**

package/src/hosted-session-cli.ts

@@ -49,7 +49,7 @@ import {
   type HostedRuntimePaths,
 } from './hosted-bootstrap.js'
 import { resumeRunEventSink } from './hosted-run-event-sink.js'
-import { BEARER_BASENAME } from './hosted-runtime-assets.js'
+import { AGENT_GIT_IDENTITY, BEARER_BASENAME } from './hosted-runtime-assets.js'
 import { createVercelProvider } from './vercel-sandbox-provider.js'
 import { buildEgressPolicy, DEFAULT_EGRESS_CANARY_HOST } from './egress-policy.js'
 import { hostedLoopCommand, type HostedLoopContext } from './hosted-loop.js'
@@ -534,7 +534,7 @@ export async function startHostedSession(
     model,
     reasoningEffort: opts.reasoningEffort,
     messageId: `${runId}:task`,
-    author: { name: 'Orizu Agent', email: 'agent@orizu.ai' },
+    author: AGENT_GIT_IDENTITY,
     anthropicDummyKey: opts.modelApiKey ? ANTHROPIC_DUMMY_KEY : undefined,
     // ALI-1017: skip the in-sandbox opencode install when the image ships it.
     prebaked: prebakedImage,